Yeah no. There is this thing called “innocent until proven guilty” we kind of cherish that concept. Now in civil trials that burden of proof is still there but it’s less than in criminal trials so who knows you may get lucky. That’s what finally tripped up OJ Simpson.
Wyze cannot prove a negative. I’m not fine with data violations - please don’t make that incorrect statement - but I am intelligent enough to know that any email used even semi-regularly has likely already been “leaked” at some time by some agency, or could be guessed by some enterprising individual who just doesn’t want his/her own email address used for something.
In this day and age people should be aware that an email address, much like a first/last name, is not secret in any way. It is an identifier, so just as anybody can say “My name is Rabbit Hole 2020”, they could say their email address is rabbithole2020@burrow.com or whatever your actual email address is. You have leveled the accusation that you’re getting these emails due to Wyze; if you really feel strongly that way, the burden is yours to show it, not Wyze’s to disprove it. Again, as evidence tilting against your claim, I point out both the link I posted previously which you can check to see if your email was exposed previously, and the fact that we are not hearing thousands of people making the same claim in this thread.
If you want to get more specific:
- I received an email on 12/26 stating that I opened an account on a Porn Social Media Website and there was a link to verify my email. The “To” field told me what email address was used to create the account.
- Following that email were quite a few “You Replied to a message” and “Your friend request was received” and messages with adult content.
- I navigated to the site without clicking on any links in the email and requested a password reset so I could access the account.
- Once I had access, I deleted the account.
Here’s why I think it was the Wyze leak: That specific email address is used only for my connected home devices and I don’t have very many. I don’t use that email to correspond to people, just receive notices from the companies that support my devices. No other company that uses that address has notified me of a data breach.
Can I prove beyond the burden of doubt that Wyze is responsible, No. I simply don’t have the information on what happened behind the scenes at Wyze to make that judgement. Do I accept the apology from Wyze that my data was leaked? Yes, I do. That’s why I haven’t disconnected my camera and I followed the steps they suggested to relink my account. Should I use the Forum to inform other Wyze users that my account was used without my authorization? Yes, because it may have happened to someone else. Do I need to prove that Wyze is the culprit? No, but I can assume they are based on the information I provided above. Does my experience need to be scrutinized to such detail? No, so back off.
Let’s “prove” a negative
Great you have at best anecdotal evidence commonly known as circumstantial evidence. But nothing that actually proves causation.
Now, many of us feel upset that our data was exposed and rightfully so. And I certainly can empathize with your feelings. But please think before making allegations carefully.
I did think before making an allegation, and this forum is causing me to think even more about it.
Wyze leak + Account used by someone else + timing of the issue = Wyze being responsible.
Wyze being responsible + Wyze taking responsibility by apologizing = Customer continuing to use services.
Customer reporting to the Forum how they were affected + helpful advice from others - criticisms = Informed individuals.
Actually that means Wyze May be responsible. It does not mean Wyze is responsible. But if you honestly feel that way consult an attorney.
OMG! I don’t need an attorney! But I still feel they are responsible.
It might be worth noting here that the song Why Can’t We Be Friends? was produced by a group named War. ![]()
I fully agree with rbruceporter. You only have a possible connection and are reaching desperately to find a definite cause. You cannot possibly know that absent the Wyze exposure of your email address this would not have happened anyway. Again I point out that you’ve probably received some spam emails in the past without having received disclosure of any breach or leak, and that large numbers of people with access to this forum and thread are NOT reporting the same type of problem.
I politely request that you stop discussing it further on this thread. It is an annoying tangent. Please step up your spam/junk filtering and move on.
I understand I truly do and I am very sorry for what you are experiencing. I wish I could fix it for you. Do you need any help with how to minimize the spam you are getting? Can I assist in any other way?
Hi @rabbithole2020,
At the risk of being repetitive, I am sorry your email address was used to sign up for a porn site. It may not be worth much, but it’s really the most a fellow user of the forum can offer.
It’s actually great that you have your emails separated like that, it’s something I try to do as well with a “black hole” email, a “registration” email, an “everyday business” email, and a personal email I use exclusively for personal and professional communications.
If you feel that email address has been too badly compromised by spam etc. you can consider dumping it and creating a new “IoT” email address. That’s what I do with my “registration” email address once a year or so.
I’m sorry if the tone of some replies makes it seem like a personal attack, I know everyone has some strong feelings about the situation and rightfully so. Thank you for the heads up and example of what some users may experience following the data leak. It gives everyone an opportunity to consider the best courses of action should they experience similar issues from this or any other leak.
If you click on my profile and read all my posts in this topic, you will see, I am upset with this breach. I also want more answers from Wyze. At the same time, I try to be helpful and funny when possible. I try to use logic, and try not to assume everyone any company is acting on bad pretense. I also am not a perfect person.
What has happened with some may or may not be related to the Wyze breach. My responses were to try to be funny, friendly and informative of the situation, not an attack on anyone.
Thank you “thequietman44” your response is exactly on par.
This issue has been beat to death, buried, dug up and beaten again in just a few days. Go search yourself or e-mail address on Google and see what you come you with. There’s a minimum of 5 companies out there that collect every bit of internet available data on you and makes it available to anyone. That info includes your name, home address, previous home address, in some cases home phone and cell phone numbers, age, family members or acquaintances, in some cases work address and this is on the cheap sites. Moving on, if you’ve registered on any of the social media sites, what info did you give them? How many other sites have you given permission to connect to? Twitter, Discus, Google…many others. If you are a home owner and pay taxes, your home address taxes paid…it’s out there mostly for free. If you’re in a panic, lock your credit. Get rid of your e-mail and start new accounts. Change all your passwords. Get rid of any internet connected device that monitors you home or interacts with it. Now think back into the not so distant past. Which major credit reporting company had a much more serious breach? Worried about you routers SSID being exposed? That’s laughable and most certainly the least of your worries. If your neighbor is internet savvy, they can probably tell you what it is. What I’m getting at is when I first purchased a WYZE cam, I questioned why it wouldn’t work with the app unless it had an active internet connection to one of WYZE servers. It still recorded locally but the app was useless. Many IP cams and devices work the same way. Bottom line, don’t want your life out there? Don’t use internet connected devices, go hard wired, in house recording. Really want to lock yourself up tight. Physically remove any and all connections to the internet because as long as you are connected to it your life, privacy and all that goes with it is not your own. To think otherwise is living a lie.
Hey JoshuaPack, I think you’ve contributed a lot to the thread, no b.s. In fact, you were the first to post the haveibeenpwned link, I think.
Part of humor is risk - have at it. I give anyone and everyone that license, GLADLY! ![]()
Trying to ask a good question. Not sure if it is.
Is customer financial data kept in a separate, linked database, perhaps even on a different server?
It may be something other folks are wondering.
I say I am nobody’s pawn. But my wife says she begs to differ. I think I have been had but if so it didn’t hurt much ![]()
If Big E is still alive he needs to come over and fix my WiFi, the big, showboat slacker. ![]()

